Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
File: 3139342e33322e3233342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: L9XMPcQgb8ExMDLN7rkGGAj9FZIn3DobxQBvSf0rUbc=
Subject key identifier: F3:22:0F:E4:D4:94:1C:C7:C9:9F:A0:8C:7E:A6:47:BC:F6:FE:F1:A8
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2281A788FFCF4EB5932FCC43379F171FEFA25A84
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:22 +0000
ROA not before: Mon 27 Mar 2023 08:22:22 +0000
ROA not after: Mon 25 Mar 2024 08:27:22 +0000
asID: 0
IP address blocks: 194.32.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:81:a7:88:ff:cf:4e:b5:93:2f:cc:43:37:9f:17:1f:ef:a2:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:22 2023 GMT
Not After : Mar 25 08:27:22 2024 GMT
Subject: CN=F3220FE4D4941CC7C99FA08C7EA647BCF6FEF1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:52:d4:70:17:1a:f2:36:9e:a3:65:c9:09:
07:43:20:f3:17:1e:9e:2c:b4:6d:51:21:84:4f:03:
c6:99:77:0d:50:c9:81:a5:d1:b6:db:9b:09:7e:56:
e8:c0:df:32:4e:f0:05:41:12:9c:9f:28:3d:e7:13:
fb:45:83:9d:04:cd:12:79:73:56:37:a8:88:fb:80:
c8:f2:f8:85:d7:e3:5d:b1:ba:64:f1:4f:2d:06:1b:
76:97:a0:90:2d:45:b0:51:fd:ef:ea:60:11:c5:a4:
66:dd:66:00:42:6f:5d:95:77:a9:99:46:b2:ef:23:
64:6b:e7:a9:5e:69:b6:f8:9b:a3:6a:29:7a:6a:03:
ad:94:19:63:46:80:36:f7:c6:d6:db:39:f6:43:a0:
97:8c:c3:8b:7e:8c:82:9e:87:43:52:2d:3f:e1:b7:
15:c9:e8:f2:5c:41:29:a8:ba:50:42:84:19:ec:58:
82:b7:af:ce:16:c9:a5:5f:20:27:b9:32:43:a7:c5:
66:0c:91:2d:67:68:b4:62:14:91:63:87:20:32:8b:
bd:5c:f2:17:7d:9b:55:b4:dc:81:7b:21:d9:36:9e:
81:ec:ff:54:d5:47:ad:ee:9c:85:a6:eb:0d:b1:9e:
c3:5d:72:b9:ff:38:a9:e5:6f:02:5d:44:a9:d5:b0:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:0F:E4:D4:94:1C:C7:C9:9F:A0:8C:7E:A6:47:BC:F6:FE:F1:A8
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.234.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:94:fb:c4:bb:45:10:ba:10:fa:80:73:3b:1b:11:04:ca:
2e:d2:aa:01:9d:ef:7e:f7:1b:ae:54:85:16:34:1d:1e:9f:27:
a2:94:e5:6f:64:7a:16:c2:9d:92:20:e7:79:c7:ef:9c:ab:ed:
6d:70:61:68:f3:7c:55:c7:ef:86:80:93:46:b1:fb:c4:3e:4a:
70:53:75:6e:91:ae:62:c1:52:0d:e3:79:ca:20:0e:d0:8c:cd:
fc:5c:8a:ce:08:19:ba:50:18:ef:dc:9c:71:f4:d7:6a:8b:9e:
04:62:13:be:7f:e2:b9:ca:77:df:af:aa:28:a7:59:81:e6:c9:
e4:be:1a:6c:2a:56:c0:5d:9f:84:84:48:85:d5:0b:84:93:45:
98:b8:0b:76:0a:16:8c:bb:31:0c:6d:58:57:0f:ca:da:dc:8b:
ef:c9:cd:08:ec:fa:48:b5:bb:6c:34:ae:a4:eb:6a:c4:d6:4e:
af:1c:e6:9e:f1:0d:d5:1a:40:1f:7f:f7:35:94:83:4a:5d:b4:
e1:99:0c:a0:ae:de:f2:92:96:ac:53:d5:0e:d3:53:57:82:73:
0a:11:f8:51:e7:c6:fb:dc:f4:72:e5:dc:15:77:e6:a8:22:23:
9f:7c:f7:71:80:59:e4:9e:78:01:be:14:9f:68:21:bd:69:44:
00:e4:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org